Skip to content

Update dependencies to fix security vulnerabilities#96

Open
plus-hi wants to merge 13 commits intomasterfrom
chore/dependency-updates
Open

Update dependencies to fix security vulnerabilities#96
plus-hi wants to merge 13 commits intomasterfrom
chore/dependency-updates

Conversation

@plus-hi
Copy link

@plus-hi plus-hi commented Mar 25, 2026

Summary

  • Update all packages to latest versions compatible with Next 14 + React 18, reducing vulnerabilities from 45 to 5
  • Remove unused prettier-eslint and prettier-eslint-cli (major source of transitive vulnerabilities)
  • Fix broken relative imports in src/pages/_deprecated/*.js
  • Reformat 27 files for Prettier 3 defaults

Dependency changes

Package Before After
next 14.2.5 14.2.35
@next/third-parties 14.2.5 14.2.35
bootstrap 5.0.0-alpha1 5.3.8
next-seo 4.17.0 6.8.0
eslint 7.32.0 8.57.1
eslint-config-next 11.1.2 14.2.35
prettier 2.4.1 3.4.2
sass 1.33 1.83.0

Note: 5 remaining vulnerabilities are in Next.js 14 core itself and can only be resolved by upgrading to Next 15+/16.

Test plan

  • npm audit shows 5 or fewer vulnerabilities
  • npm run build compiles successfully
  • npm run prettier passes with no issues
  • Smoke test: npm run dev and verify pages load correctly

🤖 Generated with Claude Code

plus-hi and others added 12 commits March 25, 2026 15:49
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
…lder

The _ prefix prevents Next.js from serving these as routes.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
…ta, and navbar

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
… CTA

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Upgrade all packages to latest versions compatible with Next 14 + React 18:
- next/eslint-config-next: 14.2.35, eslint: 8.x, bootstrap: 5.3.8
- next-seo: 6.8.0, prettier: 3.x, sass: 1.83.0
- Remove unused prettier-eslint and prettier-eslint-cli (transitive vuln source)
- Fix broken relative imports in src/pages/_deprecated/*.js
- Reformat 27 files for Prettier 3 defaults

Remaining 5 vulnerabilities are in Next.js 14 core (requires Next 15+/16 to fix).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@vercel
Copy link

vercel bot commented Mar 25, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
techladies-website Error Error Mar 25, 2026 0:38am

…ute to TechLadies

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant